Treasure Data

Treasure Data SSO API

Identity federation and SSO settings

GitHub OpenAPI
Business capability
Identity & Access Management BC-620.20

Operations 8

Each operation below carries the questions people ask an LLM about it and the instructions they give an agent to run it. Generated by API Evangelist overlay

GET /account/sso_setting Get the account's SSO configuration · Get SSO settings #
Ask an LLM
“Which identity provider is my Treasure Data account configured to use for SSO?”
“Can I check the current single sign-on settings for the account?”
Tell an agent
Show the account's SSO settings.
Get the identity provider configuration used for single sign-on.
POST /account/sso_setting Configure SSO for the account for the first time · Create SSO settings #
Ask an LLM
“How do I connect an identity provider to an account that has no SSO yet?”
“Can an admin set up single sign-on from scratch?”
Tell an agent
Create an SSO configuration for the account using {sso_setting}.
Set up a new identity provider for single sign-on with {sso_setting}.
PUT /account/sso_setting Update the account's SSO configuration · Update SSO settings #
Ask an LLM
“Can an admin change the identity provider details on an existing SSO setup?”
“What do I send to modify the account's current SSO configuration?”
Tell an agent
Update the existing SSO settings to {sso_setting}.
Modify the account's identity provider configuration with {sso_setting}.
DELETE /account/sso_setting Remove the account's SSO configuration · Delete SSO settings #
Ask an LLM
“How do I remove the identity provider from my account?”
“Is it possible to turn off single sign-on for the whole account?”
Tell an agent destructive · confirm first
Delete the account's SSO settings.
Remove the identity provider configuration from the account.
POST /user/create_with_sso/{user_first_name} Create a user who signs in with SSO · Create user with SSO #
Ask an LLM
“Can an admin add a new user who authenticates through single sign-on?”
“What details are needed to create an SSO-authenticated user?”
Tell an agent
Create an SSO user named {user_first_name} with email {email} and identifier {identifier}.
Add {user_first_name} ({email}) as a new user who logs in via SSO with identifier {identifier}.
POST /user/enforce_sso/{user_email} Require a user to log in with SSO · Enforce SSO for user #
Ask an LLM
“How do I make SSO mandatory for a specific user?”
“Can I stop a user from signing in with a password and force single sign-on?”
Tell an agent
Enforce SSO login for {user_email}.
Make single sign-on mandatory for user {user_email}.
POST /user/enable_sso/{user_email} Allow a user to log in with SSO · Enable SSO for user #
Ask an LLM
“Can I let a user choose single sign-on without making it required?”
“Which call permits one user to sign in through the identity provider?”
Tell an agent
Enable SSO as an allowed login method for {user_email}.
Permit user {user_email} to sign in with single sign-on.
POST /user/disable_sso/{user_email} Prohibit a user from logging in with SSO · Disable SSO for user #
Ask an LLM
“How do I block one user from signing in through single sign-on?”
“Can an admin turn SSO off for just a single person?”
Tell an agent
Disable SSO login for {user_email}.
Prohibit user {user_email} from signing in with single sign-on.

Documentation

📖
Documentation
https://docs.treasure.ai/apis/td-api

Specifications

⚙
OpenAPI
https://raw.githubusercontent.com/api-evangelist/treasure-data/refs/heads/main/openapi/treasure-data-sso-api-openapi.yml

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/treasure-data:treasure-data-sso-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

treasure-data-sso-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: Treasure Data TD SSO API
  description: Core REST API for managing databases, tables, jobs, bulk imports, connectors, and users within the Treasure Data Customer Data Platform. Supports Presto and Hive query execution on big data warehouses.
  version: v3
  contact:
    url: https://docs.treasure.ai/apis/td-api
  license:
    name: Treasure Data Terms of Service
    url: https://www.treasure.ai/
servers:
- url: https://api.treasuredata.com/v3
  description: Treasure Data API v3
security:
- TDAuth: []
tags:
- name: SSO
  description: Identity federation and SSO settings
paths:
  /account/sso_setting:
    get:
      operationId: getSSOSetting
      summary: Get SSO settings
      description: Gets account settings for their SSO configuration.
      tags:
      - SSO
      responses:
        '200':
          description: SSO settings
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOSettingResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
    post:
      operationId: createSSOSetting
      summary: Create SSO settings
      description: Allows admin to create and configure an IdP for an account.
      tags:
      - SSO
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SSOSettingRequest'
      responses:
        '200':
          description: SSO settings created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOSettingResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
    put:
      operationId: updateSSOSetting
      summary: Update SSO settings
      description: Allows admin to make updates to an IdP account setting.
      tags:
      - SSO
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SSOSettingRequest'
      responses:
        '200':
          description: SSO settings updated
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOSettingResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
    delete:
      operationId: deleteSSOSetting
      summary: Delete SSO settings
      description: Allows admin to delete an IdP account setting.
      tags:
      - SSO
      responses:
        '200':
          description: SSO settings deleted
        '401':
          $ref: '#/components/responses/Unauthorized'
  /user/create_with_sso/{user_first_name}:
    post:
      operationId: createUserWithSSO
      summary: Create user with SSO
      description: Allows the admin to create a user with SSO authentication.
      tags:
      - SSO
      parameters:
      - name: user_first_name
        in: path
        required: true
        schema:
          type: string
        description: First name of the new user
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              required:
              - email
              - identifier
              properties:
                email:
                  type: string
                  format: email
                identifier:
                  type: string
      responses:
        '200':
          description: User created
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOUserResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
  /user/enforce_sso/{user_email}:
    post:
      operationId: enforceSSOForUser
      summary: Enforce SSO for user
      description: Allows admin to make it mandatory for a user to login with SSO.
      tags:
      - SSO
      parameters:
      - name: user_email
        in: path
        required: true
        schema:
          type: string
          format: email
        description: Email address of the user
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SSOUserRequest'
      responses:
        '200':
          description: SSO enforced
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOUserResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
  /user/enable_sso/{user_email}:
    post:
      operationId: enableSSOForUser
      summary: Enable SSO for user
      description: Allows admin to permit a user to login with SSO.
      tags:
      - SSO
      parameters:
      - name: user_email
        in: path
        required: true
        schema:
          type: string
          format: email
        description: Email address of the user
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/SSOUserRequest'
      responses:
        '200':
          description: SSO enabled
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOUserResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
  /user/disable_sso/{user_email}:
    post:
      operationId: disableSSOForUser
      summary: Disable SSO for user
      description: Allows admin to prohibit a user from logging in with SSO.
      tags:
      - SSO
      parameters:
      - name: user_email
        in: path
        required: true
        schema:
          type: string
          format: email
        description: Email address of the user
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                sso_setting:
                  type: object
                  properties:
                    user_email:
                      type: string
      responses:
        '200':
          description: SSO disabled
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/SSOUserResponse'
        '401':
          $ref: '#/components/responses/Unauthorized'
components:
  responses:
    Unauthorized:
      description: Authentication required or API key invalid
      content:
        application/json:
          schema:
            type: object
            properties:
              error:
                type: string
  schemas:
    SSOSettingRequest:
      type: object
      properties:
        sso_setting:
          type: object
          properties:
            sign_in_endpoint:
              type: string
            sign_out_endpoint:
              type:
              - string
              - 'null'
            cert:
              type: string
    SSOUserRequest:
      type: object
      properties:
        sso_setting:
          type: object
          properties:
            user_email:
              type: string
            identifier:
              type: string
    SSOUserResponse:
      type: object
      properties:
        first_name:
          type: string
        email:
          type: string
        identifier:
          type: string
    SSOSettingResponse:
      type: object
      properties:
        sso_setting:
          type: object
          properties:
            cert:
              type: string
            identity_provider_name:
              type: string
            sign_in_endpoint:
              type: string
            sign_out_endpoint:
              type: string
            strategy:
              type: string
            updated_at:
              type: string
              format: date-time
  securitySchemes:
    TDAuth:
      type: apiKey
      in: header
      name: Authorization
      description: 'Treasure Data API key authentication. Set header value to "TD1 <your-api-key>".

        '